https://dshakes.github.io/haloshttps://dshakes.github.io/halos/https://dshakes.github.io/halos/adr/https://dshakes.github.io/halos/adr/0001-environment-as-policy/https://dshakes.github.io/halos/adr/0002-rings-point-at-immutable-releases/https://dshakes.github.io/halos/adr/0003-experiments-on-traffic-plane-first/https://dshakes.github.io/halos/adr/0004-shadow-single-turn-only/https://dshakes.github.io/halos/adr/0005-signed-oci-bundles/https://dshakes.github.io/halos/adr/0006-go-and-kong-go-pdk/https://dshakes.github.io/halos/adr/0007-guardrails-in-go-not-opa/https://dshakes.github.io/halos/adr/0008-signed-ring-pointers-and-verified-artifacts/https://dshakes.github.io/halos/adr/0009-signed-kill-switch/https://dshakes.github.io/halos/adr/0010-release-channels-for-client-experiments/https://dshakes.github.io/halos/adr/0011-gateway-enforced-posture-and-version/https://dshakes.github.io/halos/adr/0012-policy-api-v1/https://dshakes.github.io/halos/adr/0013-external-gateway-engine/https://dshakes.github.io/halos/adr/0014-step-level-multi-turn-shadow/https://dshakes.github.io/halos/adr/0015-rbac-roles-for-halo-server/https://dshakes.github.io/halos/adr/0016-audit-export-to-siem/https://dshakes.github.io/halos/adr/0017-gateway-cost-budgets/https://dshakes.github.io/halos/adr/0018-org-hierarchy-and-delegated-policy/https://dshakes.github.io/halos/adr/0019-harness-coverage-beyond-the-big-four/https://dshakes.github.io/halos/adr/0020-harvest-shadow-sessions-into-replay-evals/https://dshakes.github.io/halos/adr/0021-ha-control-plane-on-postgres/https://dshakes.github.io/halos/adr/0022-scim-provisioning/https://dshakes.github.io/halos/adr/0023-workload-identity-federation/https://dshakes.github.io/halos/adr/0024-agent-identity-and-delegation/https://dshakes.github.io/halos/adr/0025-vendor-admin-sync/https://dshakes.github.io/halos/adr/0026-per-credential-revocation/https://dshakes.github.io/halos/adr/0027-randomized-roi/https://dshakes.github.io/halos/adr/0028-agent-supply-chain-and-ai-bom/https://dshakes.github.io/halos/adr/0029-mcp-registry-and-authorization/https://dshakes.github.io/halos/adr/0030-change-governance/https://dshakes.github.io/halos/adr/0031-agent-session-ledger/https://dshakes.github.io/halos/adr/0032-egress-and-sandbox-policy/https://dshakes.github.io/halos/adr/0033-gateway-dlp-and-injection-defense/https://dshakes.github.io/halos/adr/0034-cloud-agent-governance/https://dshakes.github.io/halos/adr/0035-policy-copilot/https://dshakes.github.io/halos/architecture/components/https://dshakes.github.io/halos/architecture/low-level-design/https://dshakes.github.io/halos/architecture/tech-stack/https://dshakes.github.io/halos/concepts/architecture/https://dshakes.github.io/halos/concepts/delivery/https://dshakes.github.io/halos/concepts/evals/https://dshakes.github.io/halos/concepts/evidence-plane/https://dshakes.github.io/halos/concepts/experiments/https://dshakes.github.io/halos/concepts/how-it-works/https://dshakes.github.io/halos/concepts/org-hierarchy/https://dshakes.github.io/halos/concepts/policy-model/https://dshakes.github.io/halos/concepts/rings-and-releases/https://dshakes.github.io/halos/concepts/rollouts/https://dshakes.github.io/halos/concepts/security-model/https://dshakes.github.io/halos/concepts/self-service-portal/https://dshakes.github.io/halos/concepts/shadow-traffic/https://dshakes.github.io/halos/concepts/simple-mode/https://dshakes.github.io/halos/concepts/stack-agnostic/https://dshakes.github.io/halos/concepts/toggles/https://dshakes.github.io/halos/examples/https://dshakes.github.io/halos/getting-started/install/https://dshakes.github.io/halos/getting-started/installation/https://dshakes.github.io/halos/getting-started/introduction/https://dshakes.github.io/halos/getting-started/playground/https://dshakes.github.io/halos/getting-started/quickstart/https://dshakes.github.io/halos/getting-started/start-here/https://dshakes.github.io/halos/guides/agent-identity/https://dshakes.github.io/halos/guides/agent-supply-chain/https://dshakes.github.io/halos/guides/agentic-operations/https://dshakes.github.io/halos/guides/bedrock-via-kong/https://dshakes.github.io/halos/guides/change-governance/https://dshakes.github.io/halos/guides/ci-and-cloud-agents/https://dshakes.github.io/halos/guides/cli-upgrade-ab/https://dshakes.github.io/halos/guides/cloud-agents/https://dshakes.github.io/halos/guides/coder-workspaces/https://dshakes.github.io/halos/guides/cost-budgets/https://dshakes.github.io/halos/guides/delivery-roi/https://dshakes.github.io/halos/guides/dev-containers/https://dshakes.github.io/halos/guides/direct-anthropic/https://dshakes.github.io/halos/guides/dlp/https://dshakes.github.io/halos/guides/egress-and-sandbox/https://dshakes.github.io/halos/guides/laptops-mdm/https://dshakes.github.io/halos/guides/mcp-registry/https://dshakes.github.io/halos/guides/model-upgrade-canary/https://dshakes.github.io/halos/guides/new-harness-adapter/https://dshakes.github.io/halos/guides/operations/https://dshakes.github.io/halos/guides/policy-copilot/https://dshakes.github.io/halos/guides/production-deployment/https://dshakes.github.io/halos/guides/provider-smoke/https://dshakes.github.io/halos/guides/reliable-upgrades/https://dshakes.github.io/halos/guides/scim-provisioning/https://dshakes.github.io/halos/guides/session-ledger/https://dshakes.github.io/halos/guides/siem-export/https://dshakes.github.io/halos/guides/vendor-admin-sync/https://dshakes.github.io/halos/guides/writing-evals/https://dshakes.github.io/halos/reference/api/https://dshakes.github.io/halos/reference/binaries/https://dshakes.github.io/halos/reference/cli/https://dshakes.github.io/halos/reference/cli/admin-apply/https://dshakes.github.io/halos/reference/cli/admin-export/https://dshakes.github.io/halos/reference/cli/admin-plan/https://dshakes.github.io/halos/reference/cli/admin/https://dshakes.github.io/halos/reference/cli/agents-revocations/https://dshakes.github.io/halos/reference/cli/agents-revoke/https://dshakes.github.io/halos/reference/cli/agents-verify/https://dshakes.github.io/halos/reference/cli/agents/https://dshakes.github.io/halos/reference/cli/artifact-digest/https://dshakes.github.io/halos/reference/cli/artifact-scan/https://dshakes.github.io/halos/reference/cli/artifact-sign/https://dshakes.github.io/halos/reference/cli/artifact/https://dshakes.github.io/halos/reference/cli/audit-verify/https://dshakes.github.io/halos/reference/cli/audit/https://dshakes.github.io/halos/reference/cli/budget-status/https://dshakes.github.io/halos/reference/cli/budget/https://dshakes.github.io/halos/reference/cli/ci-config/https://dshakes.github.io/halos/reference/cli/ci-token/https://dshakes.github.io/halos/reference/cli/ci/https://dshakes.github.io/halos/reference/cli/cloud-agents-kill/https://dshakes.github.io/halos/reference/cli/cloud-agents-list/https://dshakes.github.io/halos/reference/cli/cloud-agents-render/https://dshakes.github.io/halos/reference/cli/cloud-agents/https://dshakes.github.io/halos/reference/cli/controller-run/https://dshakes.github.io/halos/reference/cli/controller/https://dshakes.github.io/halos/reference/cli/copilot-draft/https://dshakes.github.io/halos/reference/cli/copilot-experiment/https://dshakes.github.io/halos/reference/cli/copilot-explain/https://dshakes.github.io/halos/reference/cli/copilot-next/https://dshakes.github.io/halos/reference/cli/copilot/https://dshakes.github.io/halos/reference/cli/dlp-test/https://dshakes.github.io/halos/reference/cli/dlp/https://dshakes.github.io/halos/reference/cli/doctor/https://dshakes.github.io/halos/reference/cli/egress-test/https://dshakes.github.io/halos/reference/cli/egress/https://dshakes.github.io/halos/reference/cli/eject/https://dshakes.github.io/halos/reference/cli/enable-hook/https://dshakes.github.io/halos/reference/cli/enable-mcp/https://dshakes.github.io/halos/reference/cli/enable/https://dshakes.github.io/halos/reference/cli/eval-harvest/https://dshakes.github.io/halos/reference/cli/eval-online/https://dshakes.github.io/halos/reference/cli/eval-run/https://dshakes.github.io/halos/reference/cli/eval-steps-run/https://dshakes.github.io/halos/reference/cli/eval-steps/https://dshakes.github.io/halos/reference/cli/eval/https://dshakes.github.io/halos/reference/cli/exp-analyze/https://dshakes.github.io/halos/reference/cli/exp-conclude/https://dshakes.github.io/halos/reference/cli/exp-list/https://dshakes.github.io/halos/reference/cli/exp-pause/https://dshakes.github.io/halos/reference/cli/exp-promote/https://dshakes.github.io/halos/reference/cli/exp-show/https://dshakes.github.io/halos/reference/cli/exp-start/https://dshakes.github.io/halos/reference/cli/exp/https://dshakes.github.io/halos/reference/cli/explain/https://dshakes.github.io/halos/reference/cli/export-devcontainer/https://dshakes.github.io/halos/reference/cli/export-intune/https://dshakes.github.io/halos/reference/cli/export-jamf/https://dshakes.github.io/halos/reference/cli/export/https://dshakes.github.io/halos/reference/cli/freeze-check/https://dshakes.github.io/halos/reference/cli/freeze-off/https://dshakes.github.io/halos/reference/cli/freeze-on/https://dshakes.github.io/halos/reference/cli/freeze-status/https://dshakes.github.io/halos/reference/cli/freeze/https://dshakes.github.io/halos/reference/cli/gateway-compile/https://dshakes.github.io/halos/reference/cli/gateway-deck/https://dshakes.github.io/halos/reference/cli/gateway-routes/https://dshakes.github.io/halos/reference/cli/gateway/https://dshakes.github.io/halos/reference/cli/harnesses/https://dshakes.github.io/halos/reference/cli/init/https://dshakes.github.io/halos/reference/cli/keys-generate/https://dshakes.github.io/halos/reference/cli/keys/https://dshakes.github.io/halos/reference/cli/kill/https://dshakes.github.io/halos/reference/cli/mcp-registry-import/https://dshakes.github.io/halos/reference/cli/mcp-registry/https://dshakes.github.io/halos/reference/cli/mcp-serve/https://dshakes.github.io/halos/reference/cli/mcp-token/https://dshakes.github.io/halos/reference/cli/mcp/https://dshakes.github.io/halos/reference/cli/migrate/https://dshakes.github.io/halos/reference/cli/model-switch/https://dshakes.github.io/halos/reference/cli/model/https://dshakes.github.io/halos/reference/cli/onboard-company/https://dshakes.github.io/halos/reference/cli/onboard-detect/https://dshakes.github.io/halos/reference/cli/onboard-install/https://dshakes.github.io/halos/reference/cli/onboard-local/https://dshakes.github.io/halos/reference/cli/onboard-proxy/https://dshakes.github.io/halos/reference/cli/onboard-verify/https://dshakes.github.io/halos/reference/cli/onboard/https://dshakes.github.io/halos/reference/cli/plan/https://dshakes.github.io/halos/reference/cli/quickstart/https://dshakes.github.io/halos/reference/cli/release-bom/https://dshakes.github.io/halos/reference/cli/release-build/https://dshakes.github.io/halos/reference/cli/release-promote/https://dshakes.github.io/halos/reference/cli/release-publish/https://dshakes.github.io/halos/reference/cli/release-refresh/https://dshakes.github.io/halos/reference/cli/release/https://dshakes.github.io/halos/reference/cli/render/https://dshakes.github.io/halos/reference/cli/roi-ingest-file/https://dshakes.github.io/halos/reference/cli/roi-ingest-github/https://dshakes.github.io/halos/reference/cli/roi-ingest/https://dshakes.github.io/halos/reference/cli/roi-report/https://dshakes.github.io/halos/reference/cli/roi/https://dshakes.github.io/halos/reference/cli/rollback/https://dshakes.github.io/halos/reference/cli/rollout-advance/https://dshakes.github.io/halos/reference/cli/rollout-approve/https://dshakes.github.io/halos/reference/cli/rollout-list/https://dshakes.github.io/halos/reference/cli/rollout-pause/https://dshakes.github.io/halos/reference/cli/rollout-plan/https://dshakes.github.io/halos/reference/cli/rollout-rollback/https://dshakes.github.io/halos/reference/cli/rollout-simulate/https://dshakes.github.io/halos/reference/cli/rollout-status/https://dshakes.github.io/halos/reference/cli/rollout/https://dshakes.github.io/halos/reference/cli/sessions-export/https://dshakes.github.io/halos/reference/cli/sessions-import/https://dshakes.github.io/halos/reference/cli/sessions-list/https://dshakes.github.io/halos/reference/cli/sessions-show/https://dshakes.github.io/halos/reference/cli/sessions/https://dshakes.github.io/halos/reference/cli/status/https://dshakes.github.io/halos/reference/cli/telemetry-collector-config/https://dshakes.github.io/halos/reference/cli/telemetry/https://dshakes.github.io/halos/reference/cli/toggle-eval/https://dshakes.github.io/halos/reference/cli/toggle-kill/https://dshakes.github.io/halos/reference/cli/toggle-list/https://dshakes.github.io/halos/reference/cli/toggle-stale/https://dshakes.github.io/halos/reference/cli/toggle/https://dshakes.github.io/halos/reference/cli/units-codeowners/https://dshakes.github.io/halos/reference/cli/units/https://dshakes.github.io/halos/reference/cli/upgrade-check/https://dshakes.github.io/halos/reference/cli/upgrade-publish/https://dshakes.github.io/halos/reference/cli/upgrade-start/https://dshakes.github.io/halos/reference/cli/upgrade-watch/https://dshakes.github.io/halos/reference/cli/upgrade/https://dshakes.github.io/halos/reference/cli/validate/https://dshakes.github.io/halos/reference/cli/version/https://dshakes.github.io/halos/reference/cli/whoami/https://dshakes.github.io/halos/reference/comparison/https://dshakes.github.io/halos/reference/compatibility/https://dshakes.github.io/halos/reference/faq/https://dshakes.github.io/halos/reference/gateway-headers/https://dshakes.github.io/halos/reference/harness-matrix/https://dshakes.github.io/halos/reference/metrics/https://dshakes.github.io/halos/reference/policy-schema/https://dshakes.github.io/halos/reference/policy/https://dshakes.github.io/halos/reference/policy/experiment/https://dshakes.github.io/halos/reference/policy/gateway/https://dshakes.github.io/halos/reference/policy/halos/https://dshakes.github.io/halos/reference/policy/profile/https://dshakes.github.io/halos/reference/policy/ring/https://dshakes.github.io/halos/reference/policy/rollout/https://dshakes.github.io/halos/reference/policy/toggle/https://dshakes.github.io/halos/reference/policy/unit/https://dshakes.github.io/halos/reference/support-policy/https://dshakes.github.io/halos/reference/threat-model/https://dshakes.github.io/halos/tutorials/https://dshakes.github.io/halos/tutorials/add-a-toggle/https://dshakes.github.io/halos/tutorials/canary-a-model/https://dshakes.github.io/halos/tutorials/claude-code-upgrade/https://dshakes.github.io/halos/tutorials/first-10-minutes/https://dshakes.github.io/halos/tutorials/gate-upgrades-on-evals/https://dshakes.github.io/halos/tutorials/kill-a-bad-change/